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Abstract 

We prove that any Galois extension of commutative rings with normal basis and 
abelian Galois group of odd order has a self dual normal basis. Also we show that if 
S/R is an unramified extension of number rings with Galois group of odd order and 
R is totally real then the normal basis does not exist for S/ R. 

1 Introduction. 

Let -R C S' be an extension of commutative rings. Suppose that G is a finite group 
of automorphisms of S and R = S"^. By S^^^ we denote the ring Map{G, S) of 
all functions from G to S. The group G acts on S^^^ by f^{h) = f{gh) and S (= 
constant functions) is the ring of invariants. There is an obvious ring homomorphism 
(p : S S — > S^^'^ given by (f){si (8> S2){g) = Sisf. This map is G— equivariant, 
where G acts on S S via the second component. 

Recall that S is called Galois over if is surjective (and then is in fact 
an isomorphism). Clearly S^'^^ S is Galois. If R, S are Dedekind domains then 
the extension S/R is Galois iff the corresponding extension of fields of fractions is 
Galois with group G, S'-' = R and S/ R is unramified (see [3] for more about Galois 
extensions of rings). 

It is well known that if S/R is Galois then 5* is a projective, faithfully flat 
i?— module of constant rank \G\. Moreover the trace map tr : S — > R, tr{s) =J2s^ 



coincides with the module-theoretic trace and is surjective (for the proof base change 
to S where the situation is clear and then use f.f. descent). 

The classical problem is to describe the structure of S as an module. First 
step is the following well known lemma: 



R— projective and the trace map is surjective. Then S is a projective RG— module. 



RG— module. Since S is i?— projective there exists an i?— module splitting / of p. Let 
c e 5* be such that tr(c) = 1. Define a new map h : S — > F by h{s) = J2g~^f{s^c)- 
Clearly h is an RG— module map and ph{s) — J2 9~^{s^c) — str{c) — s. □ 

The natural question to ask is under what circumstances 5" is a free module. 
For rings of integers in finite extensions of the rationals (we call such rings number 
rings) this is an old and still unsolved problem. 

If 5" is a free module then there is an element s E S such that the orbit of 
s under G is an i?— basis. We call any such basis a normal basis of S. If moreover 
this basis is self-dual with respect to the trace form then we call it a self- dual 
normal basis. For example, the extension S^'^^S has always a self dual normal basis 
generated by 5}_ where 



2 Self dual normal basis. 

The following useful theorem should be well known to the experts but we do not 
know of any good reference: 

Theorem 1 Let S be a commutative ring, G a finite group of automorphisms of S 



1) H ^ is a unit in SG; 

2) S/R is Galois with normal basis generated by u. 

Proof: Let {^u^g~^){^Wgg) = 1. In other words, for any h G G we have 
Eu^Wgh = Si, i.e. J2u^''~'wg = 51, so also J^u^w^ = S^ Since (j){J2u^ ® Wg){h) = 



Lemma 1 Let S/ R be an eoctension of commutative rings such that R — , S is 



Proof: There exists an modules epimorphism p : F 



S with F a free 




and R — . For u & S the following are equivalent: 
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Y.u^'Wg = 5^, the natural map : S 0ji S — > S^'~'^ is surjectivc and S/R is Galois. 
In particular, is an isomorphism of S'G— modules. Now 0(1 ^ u) = {J2'^^9'^)^- 
is a free generator of the S'G— module S'*-'^-', so 1 (g) -u is a free generator of S S. 
Since RGu C S and after tensoring with S we get equality, -u is a free generator of 
S (note that S/R is faithfully flat). This shows that 1) implies 2). 

To get the converse observe that the S'G— module isomorphism maps 1 (g) m to 
a free generator f : g . But 5\ is also a free generator and i^u^g~^)5\ — f so 
J2iJ'^g~^ is a unit. □ 

Corollary 1 If S/R is a Galois extension of commutative rings with group G and 
normal basis then for any normal subgroup H of G the extension S^ / R is Galois 
and has a normal basis. 

Proof: If ^u^g~^ is a unit of SG then under the natural surjection SG — > 
SG/H it maps to a unit ^v^h~^ of SG/H, where v = trs/s^u. But this is a unit 
in S^G/H so the result follows by Theorem 1. □ 

Observe that if (J2u^g~^)(J2u!g9) = 1 then also {J2'U'^'^g~^){J2Wgg) = 1 so 
{J2u^^{gh)^^){J2Wggh) — 1. Since the inverse is unique we get = Wgh for any 
g,h & G. Putting w — Wi we obtain Wg — w^, so the inverse to Y,u^g~^ is J2w^9- 

Recall that in a group ring SG we have an involution * which on G acts as an 
inverse (i.e. (Z^a^gi)* = J2cLgg~^). This shows that ^w^g"^ is a unit and therefore 
w generates a normal basis. 

Suppose now that u and w generate a normal basis. Consider the unit {J2 u^g~^)i^ w^g"^) — 
Ecgg"^ where Cg = Y^u^w^^'^ . We have = Y.u^^w^^~^^ = J^u^w^^^^''^''^ for 
any f e G. If G is abehan then we get = J^u^w^^ . In particular, for 
c = ci we get — ^u^^w^^^ ^ — cp. If moreover the order of G is odd then 
J2cgg~^ = J2cg'^9 '^ = J2c^9~^ so J2c^9~^ is a unit. Since the map g g^ is an 
automorphism of G, also J2 c^9~^ is a unit. Thus c generates a normal basis too. If 
U = J2u<^9~\ W = J2w9g-^ and C = Ec^9'^ then C = ip{UW), where ip is the 
automorphism of SG which maps g^ to g for all g E G. In particular, if w is such 
that UW* = 1 then {UW){UW)* = 1 and therefore GC* = 1. In other words c 
generates a self dual normal basis (with respect to the trace form). Therefore we 
proved the following 
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Theorem 2 If S/R is a Galois extension of commutative rings with abelian Galois 
group of odd order and if it has a normal basis then it has a self dual normal basis. 

For cyclic groups of odd order this result has been obtained by Kersten and 
Michalicek [4]. Note also that Bayer and Lenstra ([1], [2]) proved that for fields and 
any group of odd order a self dual normal basis exists. The author does not know 
whether this remains true for Galois extensions of rings. 

3 Number rings. 

Suppose that S/R is a Galois extension of number rings with an abelian Galois 
group G of odd order and having a normal basis. By Theorem 2 it has a self dual 
normal basis generated by a e S". Thus X = J2 a^g~^ is a unit in SG and XX* — 1. 
We assume that R is totally real (and so is S). Consider any ring homomorphism 
ip : SG — > C. Since S is totally real, we have il){u*) = ip{u) for any u G SG. In 
particular ^^(X^) = i){X/X*) = ^{X) /^p{X) is of absolute value 1. Note that iJj{X'^) 
is an algebraic integer and we just proved that all of its conjugates have absohite 
value 1 {ip is arbitrary) so by a well known theorem of Kronecker V^(X^) is a root of 
1. Since this holds for all ip, we conclude that X"^ is a torsion unit of SG (note that 
CG = C'*^') and so is X. Since no prime divisor of the order of G is invertible in S 
and ibl are the only torsion units of S, the order of X is a divisor of 2\G\ (in general, 
if G is a finite group and S a commutative ring such that no prime divisor of the 
order of G is invertible in S then any unit of finite order in RG is of the form az where 
a is a torsion unit of S and the order of z divides for a proof see for example 
[6], Lemma 5). Now note that the trace of a regular representation of SG is given 
by T{J2iJ'gg) — \G\ui. But the trace of an element of finite order dividing 2\G\ is a 
sum of 2|G'|— th roots of 1 so in particular \G\a — T{X) e Q(^|g|)- Let K, L be the 
fields of fractions of R, S respectively. Thus we showed that L — K{a) C K{^\g\)- 
But this is clearly false since [L : K] = \G\ > [K{^\g\) '■ K]- The contradiction shows 
that S/ R can not have a normal basis. Therefore we proved the following surprising 
theorem: 

Theorem 3 Let R be the ring of integers in a totally real number field. If S/R is a 
Galois extension of number rings with Galois group G of odd order then it does not 
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have a normal basis. 

Proof: For abelian G the result was shown above. In general G is solvable so 
it has a non trivial abelian quotient H. If S/R had a normal basis then so would 

/R by Corollary 1. But this is false since / R is Galois with abehan Galois 
group of odd order. □ 

Note that Taylor ([7]) proved that in the situation of the above theorem S is 
always a free ZG— module. 

The above method allows us to prove also the following 

Proposition 1 Let R — l^^k + ^~^\ where p is an odd prime. Let S be the ring 
of integers in a cyclic extension of Q{^pk + Cpk) of degree p"'. If S[l/p\/ R[l/p\ is 
Galois and has a normal basis then it coincides with the cyclotomic p^— extension. 

Proof: We keep the above notation. First we show that il){X'^) is an algebraic 
integer. Clearly ip{R) = R, ipi^SG) C ip{S)[^pri] and ip{S) is the ring of integers in a 
cyclic extension L of Q(^pfc + ^~k) of degree p", so we will write S for ip{S). Note 
that all primes of 5'[^pn] over p are stable under complex conjugation. To show this 
let m = max{n, k}. There is only one prime tt over p in Q{C,p^ ~^^pm) and it ramifies 
in Q(^pm). Thus all primes of L{^pm + ^^'m) over n ramify in L{^pm) and therefore are 
stable under complex conjugation (note that L{^pm.) / Q{^pm) is of p— power degree). 
Now i^iX) is a p— unit in L{^pm) and therefore 'ip{X)/t/j{X) — '^{X'^) is an algebraic 
integer. As before we conclude that il^{X) is a root of 1 in L(^pm). Therefore 
t/j{Xyp"' — 1 and consequently X^^"" = 1. The argument with traces shows now 
that L — K{a) C Q(^pm) and this implies that L is the cyclotomic p"— extension of 

Q(ep + C^)- □ 

Remark. The cyclotomic p"— extension has a normal basis, as shown in [3]. 

As a direct consequence we get the following result of Kersten and Michalicek 
([5]): 

Corollary 2 If k — n — 1 and S/R is Galois then S[l/p\/ R[l/p\ does not have a 
normal basis. 

Remark. Corollary 2 suggests the following attack on Vandiver's Conjecture: show 
that any extension as above has to have a normal basis and derive that there is no 
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such extensions. Of course at present nobody knows how to do that. 
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